Managing Consultant - Red Team

bishopfox; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

Bishop Fox is seeking a Managing Consultant to guide security engagements, mentor consultants, and lead red team and purple team activities. You will ensure high-impact client outcomes while cultivating a strong delivery culture in a fast-paced environment.

Ideal candidates bring 5+ years in offensive security, expertise across AD, cloud, container tech, and hands-on capability with modern C2 tools and scripting. Join a trusted partner shaping security programs for top brands.

Qualifications

• At least five years of offensive security experience delivering adversary emulation engagements.
• 3x?
• Experience developing red team attack scenarios and purple team test cases tied to client objectives.
• Operational security judgment in selecting techniques based on objectives, detection risk, and client impact.
• Ability to produce and review accurate assessment reports with actionable recommendations.
• Experience improving red team capabilities and methodologies and helping others adopt them.

Responsibilities

• You are a consulting leader; you see problems and solutions in everything. You have the experience in security consulting to know your way around red teaming and services.
• The Managing Consultant is a working people manager who participates directly in red team, purple team, and social engineering engagements while supporting the performance and development of their direct reports.
• The manager works alongside consultants to maintain technical proficiency, build trusted relationships, and understand delivery challenges firsthand. They provide coaching, address performance concerns, and partner with the Practice Director to improve how the team operates.

Skills

People management

Mentoring

Feedback & conflict management

Client relationship management

Staffing coordination

Active Directory

Windows

macOS

Linux

Go

Python

C#

C++

PowerShell

Bash

Tools

Docker

Kubernetes

Sliver

Mythic

AWS

Azure

GCP

Microsoft 365

Google Workspace

Job description

"

For more than two decades, Bishop Fox has defined the forefront of offensive security. By combining elite human expertise with the power of its proprietary Cosmos AI engine, the firm delivers industry-leading cloud and application security services, including AI-powered penetration testing and AI/LLM security assessments that reflect real-world attacker behavior. Renowned for its innovation and contributions to the open-source community through flagship tools like Sliver and AIMap , Bishop Fox has released 25+ tools and 75+ advisories in the last 10 years.

As a trusted partner to the world\'s most recognizable brands, Bishop Fox protects 26 of the Fortune 100, eight of the top 10 global tech companies, all of the top five global media companies, 10 of the top 20 retailers and seven 7 of the top 10 manufacturers. A consistent market leader, Bishop Fox has been recognized as a Leader and "Fast Mover" in the GigaOm Radar for Attack Surface Management for five consecutive years. With a 70 NPS rating, the firm remains the trusted partner for organizations seeking to stay ahead of the evolving threat landscape. Learn more at bishopfox.com

Responsibilities

You are a consulting leader; you see problems and solutions in everything. You have the experience in security consulting to know your way around red teaming and services. You\'ve plundered apps and pillaged networks (legally, of course). You have a passion for helping build ethical hackers. At this point, you may have accumulated a few disclosures, written blog posts, and given some industry talks while leading or providing thought leadership to a team of security consultants delivering world-class results for various clients.

The Managing Consultant is a working people manager who participates directly in red team, purple team, and social engineering engagements while supporting the performance and development of their direct reports. Time is expected to be divided approximately equally between technical delivery and management responsibilities, with flexibility as engagement and team needs change.

The manager works alongside consultants to maintain technical proficiency, build trusted relationships, and understand delivery challenges firsthand. They provide coaching, address performance concerns, and partner with the Practice Director to improve how the team operates.

Requirements

People Management and Collaboration

• Demonstrated experience managing people, including providing regular feedback, supporting career development, and addressing performance concerns.


• Experience mentoring technical practitioners through hands-on collaboration, helping them build or improve skills, and guiding them to take on greater responsibility.


• Able to give and receive candid feedback, work through disagreements professionally, and maintain productive relationships with team members, peers, and leadership.


• Experience addressing internal and client concerns, coordinating resolution, and recognizing when additional support or authority is needed.


• Experience coordinating staffing needs and development opportunities with appropriate departments or business units.

Red Team Delivery and Operational Judgment

• At least five years of offensive security experience delivering adversary emulation engagements, including red team and purple team assessments, for clients across multiple industries.


• Experience developing red team attack scenarios and purple team test cases tied to client objectives, with clear rationale for planned activities.


• Demonstrated operational security judgment, including selecting techniques based on assessment objectives, detection risk, and potential client impact.


• Ability to produce and review accurate assessment reports that provide actionable recommendations and use technical evidence to convey security and business impact.


• Experience improving red team capabilities and methodologies and helping others adopt them.

Technical Expertise

• Expertise in Active Directory exploitation and lateral movement.


• Working knowledge of Windows, macOS, and Linux.


• Working knowledge of cloud and enterprise productivity platforms, including AWS, Azure, GCP, Microsoft 365, and Google Workspace.


• Working knowledge of container technologies such as Kubernetes and Docker.


• Hands-on experience with command-and-control (C2) frameworks such as Sliver and Mythic.


• Experience developing and modifying custom tools and payloads, researching and applying EDR evasion techniques, and using reverse engineering where needed to understand or adapt tools.


• Proficiency in multiple programming and / or scripting languages, such as Python, Go, C#, C++, PowerShell, or Bash.


• Ability to analyze network and application communications to troubleshoot tooling, understand unfamiliar systems, and identify opportunities for exploitation.


• Experience conducting social engineering assessments, including reconnaissance and developing and delivering phishing and vishing pretexts, with an understandin

"